upgrade-insecure-requests features known to have less than two implementations